CVE-2025-25977

CRITICAL

Canvg < 3.0.11 - Prototype Pollution

Title source: rule

Description

An issue in canvg v.4.0.2 allows an attacker to execute arbitrary code via the Constructor of the class StyleElement.

Exploits (1)

github WORKING POC 6 stars
by AikidoSec · javascriptpoc
https://github.com/AikidoSec/zen-0-days/tree/main/node/CVE-2025-25977

References (1)

Scores

CVSS v3 9.8
EPSS 0.0031
EPSS Percentile 53.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-1321
Status published
Products (2)
canvg/canvg < 3.0.11
npm/canvg 4.0.0 - 4.0.3npm
Published Mar 10, 2025
Tracked Since Feb 18, 2026